Auditing Windows NT Base Objects


To enable stronger protection on base objects, the following registry setting
informs the Windows NT Session Manager that security on the base system objects
should be at C2 security level. Impacts of this change are varied and
information is sparse. Q218473 To setup Windows NT base objects auditing, use the
following Windows NT registry hack:

Hive: HKEY_LOCAL_MACHINE
Key: SYSTEM\CurrentControlSet\Control\SessionManager
Name:
ProtectionMode
Type: REG_DWORD
Value: 1

About The Author

Leave a Comment

Your email address will not be published. Required fields are marked *

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

Scroll to Top